Privacy Policy

Effective 9 October 2026

Axie Bastion is a free browser and Android game built for the Axie Vibeathon. This page explains what the game keeps about you, why, who else handles it, and how to have it removed. We keep as little as the game needs to work: there are no ads, no analytics and no tracking cookies, and we never sell or share player data for marketing.

What we keep

Your account

• An account ID, created when you first play. Guests get an anonymous one that lives only in that browser.
• Your Ronin wallet address, if you sign in with a Ronin wallet or a Sky Mavis (Ronin) account. The address is how we recognise you on any device. We never see your recovery phrase or private keys and cannot move anything in your wallet.
• Your player name and friend code. A new account may be named from your sign-in (a display name, the first part of an email address, or a shortened wallet address); you can rename it at any time.

When you sign in with a Sky Mavis account, Sky Mavis tells our server who you are (your Mavis ID, and your email, name and wallet address where you have them). Our server keeps the wallet address and your Mavis ID; it does not store your email address. Your device keeps your name and email locally so your profile card can show them.

Your game

• Progress: your village, Axie team, levels, talents, stones, items, skins, missions, season pass and currencies.
• Play history: runs, matches and their results, ratings, leaderboards, and a short record of account actions (such as a purchase in the in-game shop or a match finished), which we use to keep the game fair and to fix problems.
• Replays of your recent runs and matches. Other signed-in players can watch them.
• Friends and challenges you send or accept.
• If you hold Axies, which ones (their IDs and traits), read from the public Ronin blockchain so you can play with them.
• Moderation records, such as a ban and its reason, if an account breaks the User Terms.

On your device

The game uses your browser's local storage (not cookies) to keep you signed in, remember your settings, sound and team, and hold replays waiting to upload. You can clear it at any time from your browser settings; signing out removes your sign-in details.

What we do not keep

We do not ask for or store your real name, address, phone number, payment details, precise location or contacts. Match chat and emotes are sent live between the two players and are not saved. The game itself does not record IP addresses or device details, though our hosting providers keep standard request logs (see below).

Why we use it

• To run your account and save your progress so you can continue on any device.
• To run matches, rankings, friends and replays.
• To check results and stop cheating and abuse.
• To show you the Axies you own, and to send or receive game stones on the Ronin testnet when you choose to.

We rely on providing the game you asked to play, and on our legitimate interest in keeping it fair and secure.

Who else handles it

• Supabase stores the game's database and replays and runs sign-in sessions.
• Vercel hosts the website and the game's server functions. Like most hosts, it keeps short-lived request logs that include IP addresses.
• Sky Mavis runs Ronin sign-in and serves Axie artwork and data. When you sign in with a Sky Mavis account, its own privacy policy also applies.
• The Ronin blockchain. We read public wallet holdings from it. If you export a game stone as a token, that transaction and your wallet address are public on the blockchain and cannot be erased by us.
• Google Fonts delivers the website's fonts, which shares your IP address with Google when the page loads.

These providers may process data outside your country. We use them only to run the game.

How long we keep it

Account and game data are kept while your account exists. Replays are trimmed automatically: each player keeps their most recent and best ones. Sign-in nonces expire within minutes, and match logs are deleted once a match has been checked. When the game is shut down, its database will be deleted.

Your choices and rights

• You can play as a guest without connecting any wallet or account.
• You can rename your player at any time, and sign out to remove your sign-in from a device.
• You can ask us to show you, correct or delete the data linked to your account. How to make a request will be added to this page. We will delete your account and the data linked to it, except anything already public on the blockchain.

Security

Data travels over encrypted connections, sign-ins are checked on our server, and each player can only change their own account. No system is perfectly secure, so please keep your wallet's recovery phrase private: we will never ask for it.

Changes

If this policy changes, we will update this page and its date. Significant changes will also be announced in the game.

Axie Infinity, Lunacia, the Axies and their artwork belong to Sky Mavis.